基于内容的实时网络信息审计系统*

指出常见基于单一主机结构的网络信息审计系统的不足，提出了一种具有全局信息共享接口的两级信息流处理的审计系统结构；系统的总框架由区域审计子系统和全局通信认证代理组成；在区域系统内，通过把慢速模块和高速模块分布实现，达到提高系统整体效率和灵活性的目的；简要介绍了全局通信认证代理和区域审计子系统间的交互规程。

Network Information Real time Auditing System Based on Content

This paper first discusses the disadvantages of existing network information auditing systems with single host architecture.Then gives out a new auditing system architecture,which has a shared port for the total information and processes two-level information flow.The whole system is composed of local sub-systems and a global communicating and authenticating agent. Inside each sub-system,slow modules and fast modules are implemented in a distributed pattern to improve the efficiency and flexibility of the whole system.Intercommunicating regulations between the global communicating and authenticating agent and the local sub-system is discussed simply in the last section of this paper.